variot - var-201902-0651

var-201902-0651

Vulnerability from variot

LCDS Laquis SCADA prior to version 4.1.0.4150 uses hard coded credentials, which may allow an attacker unauthorized access to the system with high privileges. LCDS Laquis SCADA Contains a vulnerability in the use of hard-coded credentials.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. This vulnerability allows remote attackers to bypass authentication on vulnerable installations of LAquis SCADA Software. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of login requests to the product's webserver. The product contains a hard-coded password for a number of undocumented accounts. An attacker can leverage this vulnerability to bypass authentication on the system. LCDS LAquis SCADA is a SCADA (Data Acquisition and Monitoring Control) system from LCDS, Brazil. The system is mainly used for data acquisition and process control of devices with communication technology. A security vulnerability exists in the LCDS LAquis SCADA version 4.1.0.3870, which stems from the fact that the program uses hard-coded credentials. LCDS LAquis SCADA is prone to multiple security vulnerabilities. An attacker may leverage these issues to execute arbitrary code, perform unauthorized actions or gain access to sensitive information that may aid in further attacks. Failed attempts will likely cause a denial-of-service condition. LCDS LAquis SCADA version 4.1.0.3870 is vulnerable; other versions may also be affected

Show details on source website

JSON

To clipboard

{
  "affected_products": {
    "_id": null,
    "data": [
      {
        "_id": null,
        "model": "laquis scada",
        "scope": "lt",
        "trust": 1.8,
        "vendor": "lcds",
        "version": "4.1.0.4150"
      },
      {
        "_id": null,
        "model": "software",
        "scope": null,
        "trust": 0.7,
        "vendor": "laquis scada",
        "version": null
      },
      {
        "_id": null,
        "model": "laquis scada",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "lcds",
        "version": "4.1.0.3870"
      },
      {
        "_id": null,
        "model": "le\u00e3o consultoria e desenvolvimento de sistemas ltda me laquis scada",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "lcds",
        "version": "-4.1.0.3870"
      },
      {
        "_id": null,
        "model": "le\u00e3o consultoria e desenvolvimento de sistemas ltda me laquis scada",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "lcds",
        "version": "-4.1.0.4150"
      },
      {
        "_id": null,
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "laquis scada",
        "version": "*"
      }
    ],
    "sources": [
      {
        "db": "IVD",
        "id": "d50256e2-a4e6-403f-89b1-54340f354701"
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-067"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2019-28121"
      },
      {
        "db": "BID",
        "id": "106634"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-014313"
      },
      {
        "db": "NVD",
        "id": "CVE-2018-18998"
      }
    ]
  },
  "configurations": {
    "_id": null,
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "cpe_match": [
              {
                "cpe22Uri": "cpe:/a:lcds:laquis_scada",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-014313"
      }
    ]
  },
  "credits": {
    "_id": null,
    "data": "Esteban Ruiz (mr_me) of Source Incite",
    "sources": [
      {
        "db": "ZDI",
        "id": "ZDI-19-067"
      }
    ],
    "trust": 0.7
  },
  "cve": "CVE-2018-18998",
  "cvss": {
    "_id": null,
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 10.0,
            "id": "CVE-2018-18998",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "severity": "HIGH",
            "trust": 2.5,
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "CNVD",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 10.0,
            "id": "CNVD-2019-28121",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "severity": "HIGH",
            "trust": 0.6,
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "IVD",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 10.0,
            "id": "d50256e2-a4e6-403f-89b1-54340f354701",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "severity": "HIGH",
            "trust": 0.2,
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.9 [IVD]"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "author": "nvd@nist.gov",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "exploitabilityScore": 3.9,
            "id": "CVE-2018-18998",
            "impactScore": 5.9,
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 1.8,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2018-18998",
            "trust": 1.0,
            "value": "CRITICAL"
          },
          {
            "author": "NVD",
            "id": "CVE-2018-18998",
            "trust": 0.8,
            "value": "Critical"
          },
          {
            "author": "ZDI",
            "id": "CVE-2018-18998",
            "trust": 0.7,
            "value": "HIGH"
          },
          {
            "author": "CNVD",
            "id": "CNVD-2019-28121",
            "trust": 0.6,
            "value": "HIGH"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-201901-519",
            "trust": 0.6,
            "value": "CRITICAL"
          },
          {
            "author": "IVD",
            "id": "d50256e2-a4e6-403f-89b1-54340f354701",
            "trust": 0.2,
            "value": "CRITICAL"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "IVD",
        "id": "d50256e2-a4e6-403f-89b1-54340f354701"
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-067"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2019-28121"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-014313"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201901-519"
      },
      {
        "db": "NVD",
        "id": "CVE-2018-18998"
      }
    ]
  },
  "description": {
    "_id": null,
    "data": "LCDS Laquis SCADA prior to version 4.1.0.4150 uses hard coded credentials, which may allow an attacker unauthorized access to the system with high privileges. LCDS Laquis SCADA Contains a vulnerability in the use of hard-coded credentials.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. This vulnerability allows remote attackers to bypass authentication on vulnerable installations of LAquis SCADA Software. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of login requests to the product\u0027s webserver.  The product contains a hard-coded password for a number of undocumented accounts.  An attacker can leverage this vulnerability to bypass authentication on the system. LCDS LAquis SCADA is a SCADA (Data Acquisition and Monitoring Control) system from LCDS, Brazil. The system is mainly used for data acquisition and process control of devices with communication technology. A security vulnerability exists in the LCDS LAquis SCADA version 4.1.0.3870, which stems from the fact that the program uses hard-coded credentials. LCDS LAquis SCADA is prone to multiple security vulnerabilities. \nAn attacker may leverage these issues to execute arbitrary code, perform unauthorized actions or gain access to sensitive information that may aid in further attacks. Failed attempts will likely cause a denial-of-service condition. \nLCDS LAquis SCADA version 4.1.0.3870 is vulnerable; other versions may also be affected",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2018-18998"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-014313"
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-067"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2019-28121"
      },
      {
        "db": "BID",
        "id": "106634"
      },
      {
        "db": "IVD",
        "id": "d50256e2-a4e6-403f-89b1-54340f354701"
      }
    ],
    "trust": 3.24
  },
  "external_ids": {
    "_id": null,
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2018-18998",
        "trust": 4.2
      },
      {
        "db": "ICS CERT",
        "id": "ICSA-19-015-01",
        "trust": 2.7
      },
      {
        "db": "BID",
        "id": "106634",
        "trust": 1.9
      },
      {
        "db": "CNVD",
        "id": "CNVD-2019-28121",
        "trust": 0.8
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201901-519",
        "trust": 0.8
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-014313",
        "trust": 0.8
      },
      {
        "db": "ZDI_CAN",
        "id": "ZDI-CAN-6677",
        "trust": 0.7
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-067",
        "trust": 0.7
      },
      {
        "db": "ICS CERT",
        "id": "ICSA-19-015-01T",
        "trust": 0.6
      },
      {
        "db": "IVD",
        "id": "D50256E2-A4E6-403F-89B1-54340F354701",
        "trust": 0.2
      }
    ],
    "sources": [
      {
        "db": "IVD",
        "id": "d50256e2-a4e6-403f-89b1-54340f354701"
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-067"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2019-28121"
      },
      {
        "db": "BID",
        "id": "106634"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-014313"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201901-519"
      },
      {
        "db": "NVD",
        "id": "CVE-2018-18998"
      }
    ]
  },
  "id": "VAR-201902-0651",
  "iot": {
    "_id": null,
    "data": true,
    "sources": [
      {
        "db": "IVD",
        "id": "d50256e2-a4e6-403f-89b1-54340f354701"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2019-28121"
      }
    ],
    "trust": 1.4364672
  },
  "iot_taxonomy": {
    "_id": null,
    "data": [
      {
        "category": [
          "ICS"
        ],
        "sub_category": null,
        "trust": 0.8
      }
    ],
    "sources": [
      {
        "db": "IVD",
        "id": "d50256e2-a4e6-403f-89b1-54340f354701"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2019-28121"
      }
    ]
  },
  "last_update_date": "2024-11-23T21:52:29.760000Z",
  "patch": {
    "_id": null,
    "data": [
      {
        "title": "TopPage",
        "trust": 0.8,
        "url": "https://laquisscada.com/"
      },
      {
        "title": "LAquis SCADA has issued an update to correct this vulnerability.",
        "trust": 0.7,
        "url": "https://ics-cert.us-cert.gov/advisories/ICSA-19-015-01"
      },
      {
        "title": "LCDS LAquis SCADA has an unexplained patch",
        "trust": 0.6,
        "url": "https://www.cnvd.org.cn/patchInfo/show/176017"
      },
      {
        "title": "LCDS LAquis SCADA Security vulnerabilities",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=88645"
      }
    ],
    "sources": [
      {
        "db": "ZDI",
        "id": "ZDI-19-067"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2019-28121"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-014313"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201901-519"
      }
    ]
  },
  "problemtype_data": {
    "_id": null,
    "data": [
      {
        "problemtype": "CWE-798",
        "trust": 1.8
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-014313"
      },
      {
        "db": "NVD",
        "id": "CVE-2018-18998"
      }
    ]
  },
  "references": {
    "_id": null,
    "data": [
      {
        "trust": 3.4,
        "url": "https://ics-cert.us-cert.gov/advisories/icsa-19-015-01"
      },
      {
        "trust": 1.6,
        "url": "http://www.securityfocus.com/bid/106634"
      },
      {
        "trust": 1.4,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2018-18998"
      },
      {
        "trust": 0.8,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-18998"
      },
      {
        "trust": 0.6,
        "url": "https://ics-cert.us-cert.gov/advisories/icsa-19-015-01third party advisoryus government resource"
      },
      {
        "trust": 0.6,
        "url": "http://www.securityfocus.com/bid/106634third party advisoryvdb entry"
      },
      {
        "trust": 0.3,
        "url": "https://laquisscada.com/"
      }
    ],
    "sources": [
      {
        "db": "ZDI",
        "id": "ZDI-19-067"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2019-28121"
      },
      {
        "db": "BID",
        "id": "106634"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-014313"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201901-519"
      },
      {
        "db": "NVD",
        "id": "CVE-2018-18998"
      }
    ]
  },
  "sources": {
    "_id": null,
    "data": [
      {
        "db": "IVD",
        "id": "d50256e2-a4e6-403f-89b1-54340f354701",
        "ident": null
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-067",
        "ident": null
      },
      {
        "db": "CNVD",
        "id": "CNVD-2019-28121",
        "ident": null
      },
      {
        "db": "BID",
        "id": "106634",
        "ident": null
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-014313",
        "ident": null
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201901-519",
        "ident": null
      },
      {
        "db": "NVD",
        "id": "CVE-2018-18998",
        "ident": null
      }
    ]
  },
  "sources_release_date": {
    "_id": null,
    "data": [
      {
        "date": "2019-08-20T00:00:00",
        "db": "IVD",
        "id": "d50256e2-a4e6-403f-89b1-54340f354701",
        "ident": null
      },
      {
        "date": "2019-01-19T00:00:00",
        "db": "ZDI",
        "id": "ZDI-19-067",
        "ident": null
      },
      {
        "date": "2019-08-20T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2019-28121",
        "ident": null
      },
      {
        "date": "2019-01-15T00:00:00",
        "db": "BID",
        "id": "106634",
        "ident": null
      },
      {
        "date": "2019-03-15T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2018-014313",
        "ident": null
      },
      {
        "date": "2019-01-16T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201901-519",
        "ident": null
      },
      {
        "date": "2019-02-05T18:29:00.710000",
        "db": "NVD",
        "id": "CVE-2018-18998",
        "ident": null
      }
    ]
  },
  "sources_update_date": {
    "_id": null,
    "data": [
      {
        "date": "2019-01-19T00:00:00",
        "db": "ZDI",
        "id": "ZDI-19-067",
        "ident": null
      },
      {
        "date": "2019-08-20T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2019-28121",
        "ident": null
      },
      {
        "date": "2019-01-15T00:00:00",
        "db": "BID",
        "id": "106634",
        "ident": null
      },
      {
        "date": "2019-03-15T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2018-014313",
        "ident": null
      },
      {
        "date": "2019-10-17T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201901-519",
        "ident": null
      },
      {
        "date": "2024-11-21T03:57:00.807000",
        "db": "NVD",
        "id": "CVE-2018-18998",
        "ident": null
      }
    ]
  },
  "threat_type": {
    "_id": null,
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201901-519"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "_id": null,
    "data": "LCDS Laquis SCADA Vulnerabilities related to the use of hard-coded credentials",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-014313"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "_id": null,
    "data": "trust management problem",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201901-519"
      }
    ],
    "trust": 0.6
  }
}

cve-2018-18998

Vulnerability from cvelistv5

Published

2019-02-05 18:00

Modified

2024-09-16 20:16

Severity ?

Summary

LCDS Laquis SCADA prior to version 4.1.0.4150 uses hard coded credentials, which may allow an attacker unauthorized access to the system with high privileges.

References

▼	URL	Tags
	https://ics-cert.us-cert.gov/advisories/ICSA-19-015-01	x_refsource_MISC
	http://www.securityfocus.com/bid/106634	vdb-entry, x_refsource_BID

Impacted products

Vendor

Product

Version

▼

ICS-CERT

LCDS Laquis SCADA

Version: All versions prior to version 4.1.0.4150

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T11:23:08.679Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://ics-cert.us-cert.gov/advisories/ICSA-19-015-01"
          },
          {
            "name": "106634",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/106634"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "LCDS Laquis SCADA",
          "vendor": "ICS-CERT",
          "versions": [
            {
              "status": "affected",
              "version": "All versions prior to version 4.1.0.4150"
            }
          ]
        }
      ],
      "datePublic": "2019-01-15T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "LCDS Laquis SCADA prior to version 4.1.0.4150 uses hard coded credentials, which may allow an attacker unauthorized access to the system with high privileges."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-798",
              "description": "USE OF HARD-CODED CREDENTIALS CWE-798",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-02-06T10:57:02",
        "orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
        "shortName": "icscert"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://ics-cert.us-cert.gov/advisories/ICSA-19-015-01"
        },
        {
          "name": "106634",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/106634"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "ics-cert@hq.dhs.gov",
          "DATE_PUBLIC": "2019-01-15T00:00:00",
          "ID": "CVE-2018-18998",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "LCDS Laquis SCADA",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions prior to version 4.1.0.4150"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "ICS-CERT"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "LCDS Laquis SCADA prior to version 4.1.0.4150 uses hard coded credentials, which may allow an attacker unauthorized access to the system with high privileges."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "USE OF HARD-CODED CREDENTIALS CWE-798"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://ics-cert.us-cert.gov/advisories/ICSA-19-015-01",
              "refsource": "MISC",
              "url": "https://ics-cert.us-cert.gov/advisories/ICSA-19-015-01"
            },
            {
              "name": "106634",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/106634"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
    "assignerShortName": "icscert",
    "cveId": "CVE-2018-18998",
    "datePublished": "2019-02-05T18:00:00Z",
    "dateReserved": "2018-11-06T00:00:00",
    "dateUpdated": "2024-09-16T20:16:26.205Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted